Symptom

Virtual Machines on Hyper-V fail with error 0x80070569 to Start, Stop or fail to move (Live Migration or Quick Migration). Also new Virtual Machines fail. The error messages may vary, but if running the command: GPUPDATE /force fixes the situation, at least temporarily. Creating new Virtual Machines fail as well with varying error messages.

Error Messages

This condition can appear in various screens or functions. Some of the error messages include:

Starting or Live Migrating Hyper-V virtual machines may fail with error 0x80070569

Error 0x80070569 (‘VM_NAME’ failed to start worker process: Logon Failure: The user has not been granted the requested logon type at this computer.)

Logon failure: the user has not been granted the requested logon type at this computer

Cluster Validation message: An error occurred while configuring the virtual machine role for ‘<vmname>’

Cluster Validation message: The operation failed because either the specified cluster node is not the owner of the resource, or the node is not a possible owner of the resource

Cause

If the errors appear on only a single Hyper-V computer, the cause may be the Hyper-V computer has lost or has an incomplete connection to the domain – such as a credentials mismatch. This may be remedied by removing the computer from the domain then adding the computer back.

Otherwise, the cause is likely a permissions error inherited as a GPO policy. The NT Virtual Machine\Virtual Machines special identity does not have the Log on as a Service right on the Hyper-V host computer.

The GPO policy change will be required. Quick instructions are below. A more in-depth explanation are in the links below.

Logon as a Domain Administrator

Install the Group Policy Management feature from the Server Manager console

After installation, open the GPMC MMC snap-in and browse to the policy that manages User Rights

Edit the policy to include NT Virtual Machine\Virtual Machines in the entries for Log on as a Service

Close the policy editor and initiate a gpupdate /force on the Hyper-V host computer to refresh policy. (You may need to wait several minutes for Active Directory replication to occur).

I received this in email today: “I have XCOPY’d a bunch of VHDX files from one volume to another on WS2016. What’s the easiest / fastest way to…

1 Comment

Abubakkar Sithik
on May 12, 2018 at 7:02 AM

Hi

Unable to find NT Virtual Machine\Virtual Machines id.Also i tried manually adding NT Virtual Machine\Virtual Machines Log on as a Service i cann’t find.Could you please advice how to resolved this issue.